Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/48C1F7CC8E8011EE9A8F7BD47D84E21B.roa
File: 48C1F7CC8E8011EE9A8F7BD47D84E21B.roa (raw, json)
Hash identifier: ITkTNQ4kauMCQdNfrOB2wjJAqSEAjmN1Hgy5XwbtO3U=
Subject key identifier: 35:C8:8B:5C:26:88:92:AD:AB:64:93:3F:34:55:0E:19:01:3C:D1:77
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0E57
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/48C1F7CC8E8011EE9A8F7BD47D84E21B.roa
Signing time: Wed 29 Nov 2023 06:26:52 +0000
ROA not before: Wed 29 Nov 2023 06:26:49 +0000
ROA not after: Sat 29 Nov 2025 06:26:49 +0000
asID: 60949
IP address blocks: 102.165.40.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3671 (0xe57)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Nov 29 06:26:49 2023 GMT
Not After : Nov 29 06:26:49 2025 GMT
Subject: CN=6566d9ac-a9e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:74:bf:b8:64:e1:49:96:3b:12:0b:7f:1b:e5:
8b:06:3b:9c:dc:d3:1b:41:59:cd:71:e4:da:bb:59:
09:08:e0:10:10:51:eb:34:07:6f:a7:1c:3f:23:8f:
bd:01:6d:13:65:af:11:52:6f:d6:f2:4f:eb:e2:12:
18:83:9c:a4:25:19:0a:a0:a3:68:5f:92:95:8e:fa:
89:4b:00:8d:39:ca:1a:bc:04:df:c2:35:45:7f:a7:
31:4f:10:85:b0:c6:6a:b1:49:c6:95:43:3b:1e:55:
2d:e7:30:ac:d1:d3:ef:dc:2d:be:a8:ea:63:4f:51:
05:8b:fa:3a:f8:23:b8:84:1b:0a:7b:84:2a:f2:db:
69:33:87:c2:75:2a:40:92:e3:b5:31:9c:c1:82:b8:
73:70:4e:c6:90:25:95:d0:8f:8d:dd:83:96:97:24:
a4:49:2d:ae:9a:c7:2a:8f:51:13:6b:f6:00:6c:0b:
aa:25:e4:b5:1f:62:12:77:2a:4e:0e:b6:4d:a6:46:
4e:3a:25:36:ec:ad:95:7d:6d:dc:e9:d0:58:87:1e:
81:94:4c:e1:e4:09:d2:7c:88:12:52:d3:5e:a5:07:
2c:6e:e3:d8:c5:20:a6:71:f3:1d:e7:ca:9e:95:93:
8d:0c:e3:19:4e:c3:b7:38:f5:45:c4:57:7a:b6:c7:
8c:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:C8:8B:5C:26:88:92:AD:AB:64:93:3F:34:55:0E:19:01:3C:D1:77
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/48C1F7CC8E8011EE9A8F7BD47D84E21B.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.165.40.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:e6:14:5b:89:91:9d:5f:dc:b5:b3:c9:45:f0:02:1f:1a:63:
0b:68:c6:3e:ff:c6:04:d7:c3:12:1f:ea:6d:78:2e:02:bb:06:
76:7c:52:19:b7:99:61:50:97:28:3a:59:29:f4:5d:c7:42:b8:
89:08:e0:06:0a:cc:39:c6:80:10:83:d6:ed:04:1b:d0:13:5e:
25:00:3d:d2:37:63:de:2a:fd:ef:26:e0:0e:60:51:14:5a:b2:
1c:87:be:94:12:d7:3b:f6:23:67:09:94:7f:e7:cd:c7:63:7d:
d2:84:04:09:d7:82:53:95:33:df:c5:fd:bd:c7:e5:fc:43:f1:
d2:74:bb:5d:7f:b7:d5:2d:89:58:01:ac:1c:6c:ca:83:11:54:
da:1f:5c:01:2b:78:47:56:63:b4:a1:ac:38:7d:2c:b7:fa:9f:
cf:78:91:a7:12:c1:c7:bd:96:ea:42:d4:0b:ff:a1:a3:8c:d6:
4a:59:6e:c6:73:ae:34:e0:2f:f7:0b:be:b6:52:53:16:eb:6f:
93:d1:46:b9:0b:bc:0c:3b:80:5c:6f:3a:2a:89:ac:9e:1d:31:
d7:d0:77:56:0d:89:ab:4a:7f:0a:f1:5f:f7:c5:81:f0:c2:7a:
e5:28:81:da:aa:3e:01:e8:5a:03:7e:f6:78:f5:e3:da:8d:e8:
d4:23:ec:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 03:10:41 2024 by rpki-client on console-ams.rpki-client.org